HU
Product
huggingface/transformers
9
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 3Low 0
Watch
Add huggingface/transformers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-4372 | 7.8 | May 24 | Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers Affected: before 5.3.0 |
| CVE-2026-1839 | 7.8 | Apr 7 | Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers Affected: before v5.0.0rc3 |
| CVE-2025-6921 | 7.5 | Sep 23 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.53.0 |
| CVE-2025-6638 | 7.5 | Sep 12 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.53.0 |
| CVE-2026-9856 | 7.1 | Aug 2 | Path Traversal in huggingface/transformers Affected: before 5.10.0 |
Showing 5